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CLAIMS 

1. An apparatus for performing cryptographic operations, 
comprising: 

a cryptographic instruction, received by a computing 
device as part of an instruction flow executing 
on said computing device, wherein said 
cryptographic instruction prescribes one of the 
cryptographic operations, and wherein said one of 
the cryptographic operations comprises: 

a plurality of CBC block cryptographic operations 
performed on a corresponding plurality of 
input text blocks; 

CBC block pointer logic, operatively coupled to said 
cryptographic instruction, configured to direct 
said computing device to update pointer registers 
and intermediate results for each of said 
plurality of CBC block cryptographic operations; 
and 

execution logic, operatively coupled to said CBC block 
pointer logic, configured to execute said one of 
the cryptographic operations. 

2. The apparatus as recited in claim 1, wherein said one 
of the cryptographic operations further comprises: 
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a CBC mode encryption operation, said CBC mode 

encryption operation comprising encryption of a 
plurality of plaintext blocks to generate a 
corresponding plurality of ciphertext blocks. 

3. The apparatus as recited in claim 1, wherein said one 
of the cryptographic operations further comprises: 

a CBC mode decryption operation, said CBC mode 

decryption operation comprising decryption of a 
plurality of ciphertext blocks to generate a 
corresponding plurality of plaintext blocks. 

4. The apparatus as recited in claim 1, wherein said one 
of the cryptographic operations is accomplished 
according to the Advanced Encryption Standard (AES) 
algorithm. 

5. The apparatus as recited in claim 1, wherein said 
cryptographic instruction prescribes that cipher block 
chaining mode to be employed in accomplishing said one 
of the cryptographic operations. 

6. The apparatus as recited in claim 1, further 
comprising : 

a bit, coupled to said execution logic, configured to 
indicate whether said one of the cryptographic 
operations has been interrupted by an 
interrupting event. 

7. The apparatus as recited in claim 6, wherein said bit 
is contained within a flags register. 
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8. The apparatus as recited in claim 6, wherein said 
interrupting event comprises a transfer of program 
control to a program flow configured to process said 
interrupting event, and wherein execution of said one 
of the cryptographic operations on a current input 
text block is interrupted. 

9. The apparatus as recited in claim 8, wherein, upon 
return of program control to said cryptographic 
instruction, said one of the cryptographic operations 
is performed on said current input text block. 

10. The apparatus as recited in claim 1, wherein said CBC 
block pointer logic directs said computing device to 
modify said pointer registers to point to next input 
and output text blocks at the completion of each of 
said plurality of CBC block cryptographic operations 
on each of said corresponding plurality of input text 
blocks . 

11. The apparatus as recited in claim 1, wherein said CBC 
block pointer logic directs said computing device to 
store a current output text block to a memory location 
pointed to by an initialization vector register. 

12. The apparatus as recited in claim 1, wherein said 
interrupting event comprises an interrupt, an 
exception, a page fault, or a task switch. 



The apparatus as recited in claim 1, wherein said 
cryptographic instruction is prescribed according to 
the x86 instruction format. 
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14. The apparatus as recited in claim 1, wherein said 
cryptographic instruction implicitly references a 
plurality of registers within said computing device. 

15. The apparatus as recited in claim 14, wherein said 
plurality of registers comprises: 

a first register, wherein contents of said first 
register comprise a first pointer to a first 
memory address, said first memory address 
specifying a first location in memory for access 
of said plurality of input text blocks upon which 
said one of the cryptographic operations is to be 
accomplished. 

16. The apparatus as recited in claim 14, wherein said 
plurality of registers comprises: 

a second register, wherein contents of said second 
register comprise a second pointer to a second 
memory address, said second memory address 
specifying a second location in said memory for 
storage of a corresponding plurality of output 
text blocks, said corresponding plurality of 
output text blocks being generated as a result of 
accomplishing said one of the cryptographic 
operations upon a plurality of input text blocks. 

17. The apparatus as recited in claim 14, wherein said 
plurality of registers comprises: 
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a third register, wherein contents of said third 

register indicate a number of text blocks within 
a plurality of input text blocks. 

18. The apparatus as recited in claim 14, wherein said 
plurality of registers comprises: 

a fourth register, wherein contents of said fourth 
register comprise a third pointer to a third 
memory address, said third memory address 
specifying a third location in memory for access 
of cryptographic key data for use in 
accomplishing said one of the cryptographic 
operations . 

19. The apparatus as recited in claim 14, wherein said 
plurality of registers comprises: 

a fifth register, wherein contents of said fifth 

register comprise a fourth pointer to a fourth 
memory address, said fourth memory address 
specifying a fourth location in memory for access 
of an initialization vector for use in 
accomplishing said one of the cryptographic 
operations . 

20. The apparatus as recited in claim 14, wherein said 
plurality of registers comprises: 
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a sixth register, wherein contents of said sixth 
register comprise a fifth pointer to a fifth 
memory address, said fifth memory address 
specifying a fifth location in memory for access 
of a control word for use in accomplishing said 
one of the cryptographic operations, wherein said 
control word prescribes cryptographic parameters 
for said one of the cryptographic operations. 

21. The apparatus as recited in claim 1, wherein said 
execution logic comprises: 

a cryptography unit, configured execute a plurality of 
cryptographic rounds on each of said plurality of 
input text blocks to generate a corresponding 
each of a plurality of output text blocks, 
wherein said plurality of cryptographic rounds 
are prescribed by a control word that is provided 
to said cryptography unit . 

22. An apparatus for performing cryptographic operations, 
comprising : 

a cryptography unit within a device, configured to 
execute one of the cryptographic operations 
responsive to receipt of a cryptographic 
instruction within an instruction flow that 
prescribes said one of the cryptographic 
operations, wherein said one of the cryptographic 
operations comprises : 
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plurality of CBC block cryptographic operations 
performed on a corresponding plurality of 
input text blocks; and 

CBC block pointer logic, operatively coupled to said 
cryptography unit, configured to direct said 
device to update pointer registers and 
intermediate results for each of said plurality 
of CBC block cryptographic operations. 

23. The apparatus as recited in claim 22, wherein an 
interrupting event causes a transfer of program 
control to a program flow configured to process said 
interrupting event, and wherein execution of said one 
of the cryptographic operations on a current input 
text block is interrupted. 

24. The apparatus as recited in claim 23, wherein, upon 
return of program control to said cryptographic 
instruction, said one of the cryptographic operations 
is performed on said current input text block. 

25. The apparatus as recited in claim 22, wherein said CBC 
block pointer logic directs said computing device to 
modify said pointer registers to point to next input 
and output text blocks at the completion of each of 
said plurality of CBC block cryptographic operations 
on each of said corresponding plurality of input text 
blocks . 
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26. The apparatus as recited in claim 22, wherein said CBC 
block pointer logic directs said computing device to 
store a current output text block to a memory location 
pointed to by an initialization vector register. 

27. The apparatus as recited in claim 22, wherein said 
cryptographic instruction is prescribed according to 
the x86 instruction format. 

28. A method for performing cryptographic operations in a 
device, the method comprising: 

executing one of the cryptographic operations 
responsive to receiving a cryptographic 
instruction, wherein the cryptographic 
instruction prescribes the one of the 
cryptographic operations, said executing 
comprising: 

performing a plurality of CBC mode block 

operations on a corresponding plurality of 
input text blocks; and 

writing a current input text block to an 

initialization vector location so that a 
following one of the plurality of CBC mode block 
operations on a following one of the plurality of 
input text blocks will employ the current input 
text block as an initialization vector 
equivalent . 

29. The method as recited in claim 28, further comprising: 
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transferring program control to a program flow 

configured to process a interrupting event, and 
interrupting said executing of the one of the 
cryptographic operations on the current input 
text block. 

30. The method as recited in claim 29, further comprising: 

upon return of program control to the cryptographic 
instruction following said transferring, 
performing said executing on the current input 
text block. 

31. The apparatus as recited in claim 28, wherein said 
receiving comprises: 

prescribing the cryptographic instruction according to 
the x86 instruction format. 

32. The method as recited in claim 28, wherein said 
receiving comprises: 

prescribing a cipher block chaining mode decryption 
operation as the one of the cryptographic 
operations . 

33. The method as recited in claim 28, wherein said 
executing comprises: 

accomplishing the one of the cryptographic operations 
according to the Advanced Encryption Standard 
(AES) algorithm. 
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34. The method as recited in claim 28, wherein said 
receiving comprises: 

specifying, within the cryptographic instruction, a 
cipher block chaining mode to be employed in 
accomplishing the one of the cryptographic 
operations . 



